I just installed Drupal 8.3.7 via composer and am trying to get user logins to work against our LDAP server. I added and enabled the following modules:
We are using ldaps on port 636 rather than START-TLS on port 389 so I configured the LDAP settings as follows:
[SERVER section]
Name: <whatever>
Machine-readable name: ldap (not the hostname of our LDAP Server)
LDAP Server Type: Default LDAP
Server address: ldaps://<ip address of ldap server>
Server port: 636
[BINDING section]
Binding method for searches:L Service Account Bind: Use credentials in the Service Account field below to bind to LDAP
DN for non-anonymous search: <dn for ldap auth user>
Password for non-anonymous search: <password for ldap auth user>
[USERS section]
<base dn for users>
AuthName attribute: cn
When I try to test this config, I enter my cn in the "Testing Drupal Username" field and then click the Test button. I receive the following errors:
Failed to bind with service account. LDAP error: Can't contact LDAP server (-1)
Failed to find test user <my cn> by searching on cn = <my cn>.'
I can perform an ldapsearch using the auth ldap bind DN ok on the Drupal server. I enabled logging but the messages sent to /var/log/localmessages are not useful. I just see things like:
ldap_search() function error. LDAP Error: Can't contact LDAP server (-1), ldap_search() parameters:
LDAP search error: Can't contact LDAP server (-1). Context is base DN: <base dn> | filter: (cn=<my cn>)| attributes: []
Anyone have any ideas? I looked at the tcpcdump output comparing ldapsearch and the Drupal LDAP test and I don't see any TLS handshakes in the Drupal test case so I'm not convinced I have the ldaps part of the configuration working correctly.
